Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File:                     ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier:          F0kCNw4pO2uRaTVg2dJWrgvlSt0lmi3hwnDaL85BI2Q=
Subject key identifier:   06:AC:5E:71:49:02:A7:32:EE:D0:4E:32:BB:61:D3:DB:E5:40:C3:DE
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer:       /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial:       01962DF3CF061798DBC38D24377114030759
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number:          1501
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=)
                          2: 1-cC_8sf2Sjlcbm7-DZh4XuYIArQ.roa (hash: 0N5yH6BWqUs7tPNNDSMGPx2mfE/ZRDiPQfeLQl52Wgo=)
                          3: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=)
                          4: Oe4b0YKTYWpvik3U2IZ6qMIqY0Q.roa (hash: UL3WTeHzd5FXSU3d7socZAKRgjBZ+Jri4TxH4t/75EI=)
                          5: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=)
                          6: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=)
                          7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: pLFDsL/NHYC+DSAY6lfhxIg9EWf7ElZfKwmYqF/xr0M=)
                          8: i30xTo-UR4_VbHo8fjprUc4AF6g.roa (hash: a1dsNKX1kvmUfXHRJMRlL3dZirJz9clcR1rF2jPzapU=)
                          9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=)
                          10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cf:06:17:98:db:c3:8d:24:37:71:14:03:07:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=06ac5e714902a732eed04e32bb61d3dbe540c3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:56:b3:74:ce:b2:76:bf:4b:97:af:f1:f7:
                    6f:ae:05:43:31:b2:fa:0c:23:4d:1c:bc:2b:c6:ef:
                    e6:35:c7:eb:7f:44:d5:2d:d4:53:d6:17:1a:42:cb:
                    89:45:05:92:39:eb:4c:2e:39:e4:2e:d6:70:78:68:
                    a8:88:ef:a3:b4:99:26:28:ed:bf:0f:08:c0:b5:49:
                    4d:b3:02:f3:2d:6f:c5:dd:00:54:94:5c:0d:84:4b:
                    45:3b:41:54:af:be:3a:4e:43:84:45:55:5f:d7:13:
                    9f:6e:ee:00:5c:2f:4a:1e:d6:af:f0:9b:68:40:d4:
                    06:5d:0f:7b:c2:f0:51:21:4b:d1:ae:4c:69:38:18:
                    85:ae:a6:6a:69:5d:8c:b8:1b:19:62:90:94:ce:86:
                    f1:26:35:9f:dc:df:49:56:71:54:d3:86:b2:f1:12:
                    f6:cf:8c:93:a0:e7:e2:1a:c9:8d:58:0f:fb:47:10:
                    65:e8:c6:9b:99:b8:cb:e5:24:40:b0:61:85:61:b8:
                    dd:47:46:01:be:4a:af:40:ac:3e:3d:c0:7b:31:45:
                    fd:85:03:66:9d:3b:9e:af:f3:3d:21:84:35:4f:89:
                    ae:6d:dd:4e:cb:aa:5d:7d:72:4f:ac:29:3b:a9:47:
                    ee:0c:c2:06:3f:c1:b6:9a:07:0a:1c:79:0b:88:3d:
                    b3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AC:5E:71:49:02:A7:32:EE:D0:4E:32:BB:61:D3:DB:E5:40:C3:DE
            X509v3 Authority Key Identifier:
                keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b6:a1:0f:30:ae:4b:66:06:d9:cf:c3:66:83:9b:dc:5a:c4:
         a7:fc:f9:c4:2b:fe:54:8c:aa:44:4f:14:47:52:d7:64:28:40:
         ec:c5:8c:1c:85:3c:99:80:6b:86:d1:09:43:45:ea:25:f0:80:
         57:a0:46:b1:cb:7f:8d:45:a6:de:70:d5:91:17:51:ea:4b:d2:
         44:4b:1d:29:53:10:bc:b3:b0:a2:38:e9:e9:c5:d9:23:0d:1f:
         15:b3:3d:99:00:29:47:a4:4f:56:27:03:0b:ee:a7:ee:1c:52:
         2b:56:3e:cb:19:77:f2:52:7b:c6:1c:7d:98:a7:f9:65:87:6f:
         21:c6:f4:c1:4d:d2:9c:a5:c6:03:40:51:15:4a:b0:7e:3d:20:
         5a:09:60:7f:4f:cc:dc:69:e8:57:1a:43:9d:30:08:cd:c7:4a:
         98:52:68:cd:ad:5d:3d:59:1e:ce:8f:11:ac:4a:53:56:2b:16:
         60:3f:23:a7:00:f2:42:c6:61:81:ea:45:6c:00:ca:91:73:4d:
         29:09:3e:22:80:43:4a:05:c4:ea:64:7b:df:e4:df:8f:c4:50:
         26:f9:b2:ce:46:dd:34:e1:4a:0f:55:89:96:b5:f2:45:82:6c:
         9a:76:c3:75:86:11:17:d9:b5:d7:34:4d:ba:30:ba:92:29:ba:
         a2:ec:8b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----